Privacy Policy: Gilded Petal

Introduction

Welcome to Gilded Petal. As artisans in floral design and guild craft, specializing in bespoke floral arrangements, dried flower art, event installations, and artisan craft workshops, we are committed to protecting the privacy and security of your personal information. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our online platform or engage with our services.

By using our site or services, you agree to the collection and use of information in accordance with this policy. Gilded Petal adheres to the General Data Protection Regulation (GDPR) and other relevant data protection laws.

Information We Collect

We collect various types of information to provide and improve our bespoke services to you.

• Personal Data You Provide Directly: This includes information you provide when you request a bespoke floral arrangement, book a workshop, make an inquiry, or communicate with us. This may include your name, email address, postal address for deliveries, phone number, and any specific details related to your order or workshop attendance (e.g., event dates, preferences for floral installations, dietary requirements for workshops).
• Payment Data: While we do not directly store your full payment card details, we collect transaction information related to your purchases. Payment processing is handled by secure third-party payment processors.
• Communications Data: Records of your correspondence with us, such as emails and messages, are retained to assist with customer service and service improvements.
• Technical and Usage Data: When you visit our online platform, we automatically collect information about your device and how you interact with our site. This may include your IP address, browser type, operating system, referral sources, pages viewed, and the dates/times of your visits. This data is collected through cookies and similar technologies.

How We Use Your Information

We use the collected information for various purposes, primarily to deliver our artisan services and enhance your experience:

• To Provide and Manage Services: To process your orders for floral arrangements, manage your workshop bookings, coordinate event installations, and provide bespoke botanical decor and preservation services.
• To Communicate With You: To respond to your inquiries, send you order confirmations, invoices, updates about your services, and information regarding workshops you have booked.
• For Marketing and Promotions: With your explicit consent, to send you newsletters, promotional offers, and information about new services or workshops that may be of interest to you. You can opt-out at any time.
• To Improve Our Services: To analyze how our site is used, troubleshoot issues, and develop new features or improve existing ones, ensuring our offerings meet your needs and expectations.
• For Legal and Security Purposes: To comply with legal obligations, enforce our terms and conditions, and protect the rights, property, or safety of Gilded Petal, our customers, and others.

Legal Basis for Processing Personal Data (GDPR)

Gilded Petal processes your personal data only when we have a valid legal basis to do so, including:

• Performance of a Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., to fulfil your order for floral arrangements or workshop booking).
• Legitimate Interests: When processing is necessary for our legitimate interests, provided your rights and interests do not override those interests (e.g., to improve our services, for fraud prevention, or for direct marketing where permissible).
• Consent: Where you have given explicit consent for us to process your personal data for a specific purpose (e.g., for marketing communications). You have the right to withdraw your consent at any time.
• Legal Obligation: When processing is necessary for compliance with a legal obligation to which we are subject.

Disclosure of Your Information

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties except in the following circumstances:

• Service Providers: We may share your information with trusted third-party service providers who assist us in operating our online platform, conducting our business, or providing services to you (e.g., payment processors, delivery services for floral arrangements, website analytics providers). These parties are contractually obligated to keep your information confidential and use it only for the purposes for which we disclose it to them.
• Legal Requirements: We may disclose your information when required to do so by law, in response to a court order, or when we believe such action is necessary to comply with legal processes, protect our rights, or ensure the safety of others.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of the business assets. We will notify you before your personal data becomes subject to a different privacy policy.

Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this privacy policy, consistent with our legal obligations. This means we will keep your data for the duration of your active relationship with us and for a reasonable period thereafter to resolve disputes, enforce our agreements, and comply with legal requirements.

For example, information related to purchases will be kept for financial auditing and tax purposes. Workshop booking details will be retained for administrative and historical records.

Your Data Protection Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• The Right to Access: You have the right to request copies of your personal data.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The Right to Erasure (the 'Right to be Forgotten'): You have the right to request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

Security of Your Information

The security of your personal data is paramount to us. We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. These include appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal data.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Cookies

Our online platform uses "cookies" to enhance your experience. Cookies are small data files placed on your device. They help us understand how you use our site, remember your preferences, and improve the services we offer.

• Essential Cookies: Necessary for the proper functioning of our site, enabling you to navigate and use its features.
• Analytical/Performance Cookies: Allow us to count visits and traffic sources so we can measure and improve the performance of our site.
• Functionality Cookies: Used to recognize you when you return to our site and to personalize content for you.

You have the option to accept or refuse these cookies and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our services.

Links to Other Sites

Our online platform may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

Our services are not intended for anyone under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our site prior to the change becoming effective, and update the "last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions or concerns about this Privacy Policy, our data practices, or if you wish to exercise your data protection rights, please contact us:

• Gilded Petal
• 7 Hatton Garden,
• Clerkenwell,
• London, Greater London,
• EC1N 8AD, UK